Jenkins Security Advisory 2026-08-05
Jenkins published a security advisory dated 2026-08-05 listing affected components. Jenkins Core is among them, along with 16 plugins, including AWS CodeBuild, CodeSonar, Google Chat Notification, Qualys Container Scanning Connector and SCM-Manager. The source text does not describe the vulnerabilities, their severity, or the fixed versions.
What changes for platform teams
Teams running Jenkins core or any listed plugin should check their installed versions against the advisory and apply the fixes it describes. The source text gives no versions, CVE identifiers or severity, so those details must be taken from the full advisory.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules